Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json)
Hash identifier: LnAwRDMeQOBoven7MbIcN6tB4fo6uCDK01A3OSNnqis=
Subject key identifier: 0A:A7:5F:2F:F9:79:3C:C1:14:22:43:86:E0:E7:8B:37:A2:BD:07:29
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 0197B77CC1A099B43056FE24C5B491FBB2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
Manifest number: 1546
Signing time: Sat 28 Jun 2025 17:01:35 +0000
Manifest this update: Sat 28 Jun 2025 17:01:35 +0000
Manifest next update: Sun 29 Jun 2025 17:01:35 +0000
Files and hashes: 1: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: ld9EcXq1ytGIbEjbUUNZQSROgHc28QCcwQM6vR6K6Ck=)
2: uWnagnV7ph6W305lDhQcUtu8iOA.roa (hash: O2rllaolJLmB6wHK4WL6QTUawzuqbXsQObcxgCsZ0L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:c1:a0:99:b4:30:56:fe:24:c5:b4:91:fb:b2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: Jun 28 17:01:35 2025 GMT
Not After : Jun 29 17:01:35 2025 GMT
Subject: CN=0aa75f2ff9793cc114224386e0e78b37a2bd0729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:ee:4e:62:1e:0e:30:49:e9:5c:bb:17:67:
1c:d8:c5:38:71:f0:00:c6:f9:a3:e3:5e:f4:00:81:
f9:66:32:5e:63:db:1a:3b:0e:b5:70:c3:52:a7:cb:
8e:12:ea:bd:96:1c:bd:06:80:6b:c2:f3:80:2c:cc:
99:89:e5:57:87:09:1e:ef:be:11:e1:d1:6b:bb:f7:
8f:c7:37:4e:41:04:d2:06:75:6f:47:a1:32:87:4b:
4f:86:ef:a7:1f:45:29:ed:8c:a1:d5:0c:d4:42:f5:
9c:5d:8d:d0:fb:54:d1:51:ee:61:3d:7d:26:59:be:
94:73:8f:fc:78:ad:78:64:84:cb:4e:e8:f9:a5:5e:
8e:81:a8:85:ee:32:dc:d8:58:ce:77:e8:a7:58:08:
a5:ec:86:fa:7d:a5:47:29:db:c6:30:9d:a6:5f:b4:
48:5c:35:d2:65:14:65:5b:ed:04:43:4f:15:3d:6b:
da:fb:79:a1:1f:f2:5f:ad:02:d1:03:4a:69:98:31:
cb:db:a3:53:a1:c3:07:1e:f3:68:ef:b7:94:3c:a2:
ce:6e:04:8a:96:3d:31:91:31:21:39:34:05:c9:8f:
f3:80:f5:e4:67:63:c2:af:9c:69:9e:38:b1:e0:fc:
85:ca:f6:34:93:30:ad:7f:01:80:37:0e:fa:18:50:
8c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A7:5F:2F:F9:79:3C:C1:14:22:43:86:E0:E7:8B:37:A2:BD:07:29
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a3:54:9b:63:b1:20:e7:fc:5a:ba:4b:52:aa:2d:5f:5a:36:
05:a2:91:77:0f:ca:4e:6a:7a:6f:55:83:f5:92:5e:b0:df:ce:
b3:9a:84:39:fc:ed:e2:13:42:67:8b:8d:b4:84:14:d6:1a:f9:
37:ed:90:19:43:5c:d9:d7:7c:1c:0e:eb:69:7b:77:fe:61:95:
46:e8:ca:5d:cf:42:c4:bd:ea:56:70:1d:79:16:d8:6d:65:29:
11:5d:dc:6f:c8:12:b1:8d:81:21:1a:18:66:dd:96:39:71:16:
df:41:26:58:18:1d:7f:17:0b:72:a8:f3:e2:1c:4f:7d:fe:4f:
c8:68:5d:77:84:f9:8f:5e:d8:b9:f8:5b:42:5c:5d:60:96:32:
86:22:e6:01:b1:87:31:77:5b:b9:09:80:5b:a2:23:5c:df:45:
52:7c:0d:21:f5:f3:7e:3b:93:73:52:f3:ec:c5:15:5d:6b:15:
8a:45:b6:e1:53:eb:1e:4e:96:60:9e:ce:6c:42:8e:36:54:bb:
93:e5:c5:98:d1:a1:ee:f6:47:d1:88:b1:97:45:35:a7:75:8c:
9b:e1:82:32:6e:60:d0:88:87:8d:0b:72:9e:99:e6:01:ad:62:
2c:08:01:16:78:f2:b5:df:26:e9:44:97:da:fa:5d:4e:ab:06:
99:f5:ee:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:12 2025 by rpki-client